JUNOS Software version tested
JUNOS 9.5
Firewall performance (max)
7 Gbps
IPS performance (NSS 4.2.1)
900 Mbps
AES256+SHA-1 / 3DES+SHA-1 VPN performance
1.5 Gbps
Maximum concurrent sessions
512 k (2 GB DRAM)
New sessions/second (sustained, TCP, 3-way)
30,000
Maximum security policies
8,192
Maximum users supported
Unrestricted
Maximum available slots for IOCs
N/A
Fixed I/O ports
4 x 10/100/1000BASE-T
WAN / LAN interface options
- Dual Port T1/E1
- Quad Port T1/E1
- 16 x 1 10/100/1000 copper (PoE optional)
- 24 x 1 10/100/1000 copper w / 4SFP ports (PoE optional)
High-availability support
Yes
Firewall
- Network attack detection: Yes
- DoS and DDoS protection: Yes
- TCP reassembly for fragmented packet protection: Yes
- Brute force attack mitigation: Yes
- SYN cookie protection: Yes
- Zone-based IP spoofing: Yes
- Malformed packet protection: Yes
Intrusion Detection and Prevention
- Stateful protocol signatures: Yes
- Attack detection mechanisms: Stateful signatures, protocol anomaly detection (zero-day coverage), application identification
- Attack response mechanisms: Drop connection, close connection, session packet log, session summary, email, custom session
- Attack notification mechanisms: Structured syslog
- Worm protection: Yes
- Simplified installation through recommended policies: Yes
- Trojan protection: Yes
- Spyware/adware/keylogger protection: Yes
- Other malware protection: Yes
- Protection against attack proliferation from infected systems: Yes
- Reconnaissance protection: Yes
- Request and response side attack protection: Yes
- Compound attacks — combines stateful signatures and protocol anomalies: Yes
- Create custom attack signatures: Yes
- Access contexts for customization: 500+
- Attack editing (port range, other): Yes
- Stream signatures: Yes
- Protocol thresholds: Yes
- Stateful protocol signatures: Yes
- Approximate number of attacks covered: 5,500+
- Detailed threat descriptions and remediation/patch info: Yes
- Create and enforce appropriate application-usage policies: Yes
- Attacker and target audit trail and reporting: Yes
- Deployment modes: Inline or TAP
Dimensions and Power
- Dimensions (W x H x D): 17.5 x 3.5 x 18.2 in (44.4 x 8.8 x 46.2 cm)
- Weight: Chassis: 24.9 lbs (11.3 kg) No interface modules 1 power supply
- Power supply (AC): 100–240 VAC, Single 250 W or Dual 250 W
- Maximum power draw: 247 W redundant, or 494 W non-redundant
- Average power consumption: 122 W
SRX Series Services Gateways High Availability Using Junos Automation
SRX Series and J Series Network Address Translation
Juniper Networks SRX Series and J Series NAT for ScreenOS Users
Branch SRX Series Services Gateways Golden Configurations
Web Filtering For Branch SRX Series and J Series
Antivirus for Branch SRX Series and J Series
Juniper Networks Integrated Firewall/VPN Platforms
SRX Series Services Gateways for the Branch
SRX Series Services Gateways: Delivering a Scalable, Secure Solution for Network-Based Managed Service Providers
The Next Step in Network Security for Enterprises
WANTED: The Future of Network Security for Service Providers - Now!
The Dynamic Services Architecture: A New Approach to Network Solution Design
The Dawn of Network Security Super Gateways (NSSGs)
| Base System |
| SRX650-BASE-SRE6-645AP | SRX650 Services Gateway with 1 Services Routing Engine (SRE), 4 x 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, fan tray, 645W AC-source power supply unit for SRX650. Provides 397 W system power @ 12 V and 247 W POE power @ 50 VDC. Works with 90-250 VAC input. Includes power cord and rack mount kit. |
| Interface Modules |
| SRX-GP-16GE | 16-port 10/100/1000BASE-T XGPIM |
| SRX-GP-16GE-POE | 16-port 10/100/1000BASE-T PoE XGPIM |
| SRX-GP-24GE | 24-port 10/100/1000BASE-T XGPIM, includes 4 SFP slots |
| SRX-GP-24GE-POE | 24-port 10/100/1000BASE-T PoE XGPIM, includes 4 SFP slots |
| SRX-GP-DUAL-T1-E1 | Dual T1/E1 GPIM |
| Power Supplies and Accessories |
| SRX600-PWR-645ACAC-POE | Spare 645 W AC PoE power supply unit for SRX650 systems. One is included in SRX650 Base System (SRX650-BASE-SRE6-645AP). |
| SRX600-SRE6H SPARE | Spare SRE6-H for SRX650. One is included in SRX650 Base System (SRX650-BASE-SRE6-645AP). |
| SRX650-CHAS | SRX650 chassis including fan tray. No system processor (SRE) and no power supply unit. |
| SRX650-FAN-01 | Spare SRX650 fan tray. One is included in SRX650 Chassis Spare (SRX650-CHAS), and included in SRX650 Base System (SRX650-BASE-SRE6-645AP). |
| SRX650-FILT-01 OPTIONAL | Not included in SRX650 Chassis Spare (SRX650-CHAS), and not included in SRX650 Base System (SRX650-BASE-SRE6-645AP). Optional, as this is not required for normal operations, but recommended for dusty environments. |
Copyright© 1999-2012 Juniper Networks, Inc. All rights reserved.